AIKIDO-2026-365378
@modelcontextprotocol/sdk is vulnerable to Missing Authorization
86
High Risk
This Affects:
@modelcontextprotocol/sdkTL;DR
The SDK's experimental InMemoryTaskStore keeps tasks in a single map without recording which session created each task. A client that knows or guesses a task ID can list, read, or cancel another session's task through the same taskStore instance. Any HTTP server that passes taskStore to McpServer or Server exposes other clients' task state and control to any connected session. With the fix, each task is tied to the session that created it, so a new session can no longer reach earlier sessions' tasks.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your HTTP server passes taskStore to McpServer or Server.
Background info
@modelcontextprotocol/sdk is vulnerable to Missing Authorization in versions 1.24.0 - 1.31.0.
How to fix this
Upgrade the @modelcontextprotocol/sdk library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.